System notes queries via saved search will have a distinct event (Create) logged with the context defined (i.e. UI, Webservices, etc;) that coupled with the user would yield the account and the context that created the record. A system notes search with criteria explicit to those parameters will be refined and shouldn't bog too hard. (There is only one "Create" event within system notes, all other logs would be suppressed.